Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/LcNSXGkRMAWjY_MmqNH4L1IVG38.roa
File:                     LcNSXGkRMAWjY_MmqNH4L1IVG38.roa (raw, json)
Hash identifier:          Ua3XDkPviwryLy6nSZvXoj2w/0SvbM/CVytus0lD6hU=
Subject key identifier:   2D:C3:52:5C:69:11:30:05:A3:63:F3:26:A8:D1:F8:2F:52:15:1B:7F
Certificate issuer:       /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial:       018CC801086E724659B522F16388710B8C87
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/LcNSXGkRMAWjY_MmqNH4L1IVG38.roa
Signing time:             Tue 02 Jan 2024 02:29:20 +0000
ROA not before:           Tue 02 Jan 2024 02:29:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9063
IP address blocks:        185.38.76.0/22 maxlen: 22
                          2a01:4060::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:08:6e:72:46:59:b5:22:f1:63:88:71:0b:8c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
        Validity
            Not Before: Jan  2 02:29:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2dc3525c69113005a363f326a8d1f82f52151b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:83:cc:13:7e:57:b6:00:ad:83:a4:d2:c4:
                    eb:d8:3b:9e:6a:a5:df:66:5f:da:c0:2b:58:c8:e6:
                    01:4b:6f:67:6e:c2:54:3a:0d:51:8e:97:38:9a:e9:
                    63:cd:7f:07:2e:69:30:a0:44:b5:f4:a7:30:62:ee:
                    ce:a5:fd:8a:b5:30:30:66:a0:82:d4:5a:40:3a:5d:
                    cc:59:c2:c6:1a:7c:c6:84:e1:1d:28:4e:4a:cc:09:
                    d6:a5:69:71:f5:d9:85:db:10:00:93:27:78:67:5a:
                    ad:92:b2:ac:cb:c1:52:6c:f9:32:17:39:6a:8a:9c:
                    e2:48:7b:9a:87:62:ee:2f:f6:74:48:7a:e5:45:f7:
                    7f:81:4c:30:80:16:9b:bd:da:53:e9:16:47:dc:77:
                    73:4a:ed:b0:e0:f9:9c:4c:72:12:6f:f1:98:f3:96:
                    0e:ef:c6:ea:89:6f:39:66:44:2c:a4:78:90:16:76:
                    f4:b8:ae:b3:76:42:e7:74:37:ca:81:21:36:81:e8:
                    fc:c0:ab:4d:c1:44:dd:c6:d8:64:36:73:dd:69:1a:
                    50:0c:13:b7:6e:58:a6:9d:82:21:50:9b:7c:8f:9a:
                    0c:79:ff:5e:14:a1:06:54:dd:4f:34:86:c8:6f:5b:
                    64:52:32:68:de:11:bd:1d:93:1c:8e:11:8d:3e:a2:
                    b1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C3:52:5C:69:11:30:05:A3:63:F3:26:A8:D1:F8:2F:52:15:1B:7F
            X509v3 Authority Key Identifier:
                keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/LcNSXGkRMAWjY_MmqNH4L1IVG38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.76.0/22
                IPv6:
                  2a01:4060::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:f9:ce:bf:cd:6f:ee:2d:51:0b:19:25:0c:c9:98:84:0e:3e:
         dc:e2:d3:09:83:03:c4:05:4c:1e:fc:eb:aa:54:71:26:29:2e:
         68:a4:43:ec:6a:68:fe:93:2a:1a:ef:02:87:0d:e6:cd:3a:a5:
         86:e0:bb:77:3c:15:de:52:66:8e:e4:ad:71:3a:28:79:26:b2:
         57:0f:55:de:bb:e9:60:3a:23:7d:00:c5:d9:50:cb:26:46:71:
         1c:67:61:27:fb:2c:81:2e:a9:81:3e:69:68:8f:5f:9b:85:59:
         7b:b1:42:06:52:42:67:de:d7:4f:85:f8:0a:bf:62:7e:12:03:
         b7:22:11:62:3c:d8:7e:67:0c:04:a1:ee:31:1e:c5:52:b0:9a:
         81:29:1b:f4:26:a2:13:19:17:8d:dc:ef:82:61:68:86:40:e8:
         9c:5d:57:f3:53:c4:84:5b:00:4b:3f:30:12:12:4b:86:48:a6:
         4b:89:90:3d:a2:a5:75:ab:a7:e3:c3:44:02:87:3a:3a:b1:99:
         3a:3d:55:40:6f:37:10:10:9d:64:5a:39:b3:af:6d:df:eb:3f:
         6a:ff:eb:b5:c4:cc:1d:ca:28:bf:51:c3:dd:2c:09:b5:df:ba:
         a7:15:c8:4c:06:32:60:b3:bc:1d:53:8f:c1:32:e5:0b:cb:46:
         5d:e1:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----